$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/81971457-da63-315b-a46b-b1f35234d76e.roa File: 81971457-da63-315b-a46b-b1f35234d76e.roa (raw, json) Hash identifier: jJ0tmTUIPV8GgW/6E+C1G2NeWJEBzIrYhyAIFIqIM8Q= Subject key identifier: 04:1D:DB:06:FD:54:58:B2:2D:39:A5:F1:88:F6:A1:B5:37:23:33:37 Certificate issuer: /CN=5a431902-5d61-4220-a913-af4f21f3413d Certificate serial: 010D0C9F4328584AEE26946BF01046E2A573F800 Authority key identifier: 9C:3E:74:C1:EB:97:89:46:37:ED:C9:94:44:43:32:C7:60:EA:08:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/81971457-da63-315b-a46b-b1f35234d76e.roa Signing time: Thu 21 Aug 2025 13:00:41 +0000 ROA not before: Thu 21 Aug 2025 13:00:41 +0000 ROA not after: Wed 19 Nov 2025 14:00:41 +0000 asID: 3214 IP address blocks: 23.165.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/5a431902-5d61-4220-a913-af4f21f3413d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/5a431902-5d61-4220-a913-af4f21f3413d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:26:94:6b:f0:10:46:e2:a5:73:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a431902-5d61-4220-a913-af4f21f3413d Validity Not Before: Aug 21 13:00:41 2025 GMT Not After : Nov 19 14:00:41 2025 GMT Subject: CN=c7c240c2-a94a-42d9-af23-01421963ba0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:1c:72:d5:43:c3:12:be:ba:bb:24:b3:0f:28: ad:93:3a:78:28:62:14:e8:60:1a:60:3d:93:48:e4: a9:ef:d9:f3:d2:12:80:e5:b4:d8:10:9b:db:a4:86: 4b:99:3a:36:e6:76:e5:6b:a2:14:a4:84:40:e7:6f: e6:a7:c7:d8:c6:f5:15:34:6d:c4:eb:19:fb:3a:36: 07:42:18:21:83:e7:6a:38:70:35:90:76:d6:b0:82: 4d:5f:3f:ed:8b:62:8b:a2:10:7a:a1:3c:87:49:83: b2:47:ab:8f:bf:8f:96:fd:42:cb:9c:fe:02:ef:fa: 6b:66:84:44:07:ec:d6:42:d4:5f:01:6e:a4:a1:c7: 66:e7:4f:b2:31:d5:2e:60:c4:3b:90:d2:3a:c0:cf: e8:77:81:80:a7:93:62:72:0f:92:49:62:14:98:b3: c3:c5:02:0c:60:62:99:6f:aa:b9:8d:f0:c9:a5:cf: 85:59:ca:3a:f1:57:fd:6b:0e:a3:40:0d:8f:67:94: a9:ad:02:66:99:43:4b:85:a2:47:e5:ce:3e:b7:bd: 5c:f6:1d:ec:66:85:91:bd:2b:04:20:c2:bd:5a:db: 01:63:8c:a1:38:da:c5:0f:1f:34:03:46:fb:44:ac: 65:76:e8:4e:19:d8:4c:01:de:66:b2:9f:d9:f6:95: 16:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:1D:DB:06:FD:54:58:B2:2D:39:A5:F1:88:F6:A1:B5:37:23:33:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/81971457-da63-315b-a46b-b1f35234d76e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/5a431902-5d61-4220-a913-af4f21f3413d.crl X509v3 Authority Key Identifier: keyid:9C:3E:74:C1:EB:97:89:46:37:ED:C9:94:44:43:32:C7:60:EA:08:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d.cer sbgp-ipAddrBlock: critical IPv4: 23.165.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:f6:eb:13:ec:2b:63:75:5f:98:c4:f6:67:fb:94:cc:57:16: c3:f6:05:b3:04:82:3b:c7:8a:f7:3f:a4:2d:cf:36:98:cb:59: 8d:a7:02:ca:92:69:59:12:8d:15:c0:c4:3e:4b:82:31:6e:88: f5:29:68:8a:32:d4:cd:7c:90:e0:0e:d4:41:56:33:4e:53:77: 0f:94:93:ba:57:e7:f9:ce:40:70:4f:ad:07:4d:b2:b2:b8:18: 61:8f:3a:4f:ec:de:ff:9e:97:70:1f:b3:30:cd:a5:02:fc:11: 91:65:4a:f3:2b:ec:7a:ab:b0:f2:b6:57:3b:a2:66:09:16:91: 0b:99:ec:aa:0f:d8:49:3c:40:3b:15:e8:25:dc:18:d6:0f:6b: b3:67:32:53:75:51:3b:e8:e9:d1:59:08:3a:3a:b0:92:d2:04: 27:a2:ad:74:7f:f0:61:26:f7:43:16:bf:d8:24:b4:38:3b:68: 44:4c:82:5d:78:31:04:f0:3b:87:80:1b:67:16:47:c6:12:aa: bb:b5:13:84:fb:aa:18:5f:ce:8d:d7:43:81:4c:83:9f:67:8f: 21:4c:19:16:29:c7:14:ec:b6:5a:cd:b2:c1:33:f8:ec:18:63: fa:ec:29:9b:fd:69:77:32:d5:10:2e:23:e0:ea:b0:83:76:39: 0d:e7:4a:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruJpRr8BBG4qVz+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWE0MzE5MDItNWQ2MS00MjIwLWE5MTMtYWY0ZjIxZjM0 MTNkMB4XDTI1MDgyMTEzMDA0MVoXDTI1MTExOTE0MDA0MVowLzEtMCsGA1UEAxMk YzdjMjQwYzItYTk0YS00MmQ5LWFmMjMtMDE0MjE5NjNiYTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRxy1UPDEr66uySzDyitkzp4KGIU6GAaYD2T SOSp79nz0hKA5bTYEJvbpIZLmTo25nbla6IUpIRA52/mp8fYxvUVNG3E6xn7OjYH Qhghg+dqOHA1kHbWsIJNXz/ti2KLohB6oTyHSYOyR6uPv4+W/ULLnP4C7/prZoRE B+zWQtRfAW6kocdm50+yMdUuYMQ7kNI6wM/od4GAp5Nicg+SSWIUmLPDxQIMYGKZ b6q5jfDJpc+FWco68Vf9aw6jQA2PZ5SprQJmmUNLhaJH5c4+t71c9h3sZoWRvSsE IMK9WtsBY4yhONrFDx80A0b7RKxlduhOGdhMAd5msp/Z9pUWkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAQd2wb9VFiyLTml8Yj2obU3IzM3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81YTQz MTkwMi01ZDYxLTQyMjAtYTkxMy1hZjRmMjFmMzQxM2QvODE5NzE0NTctZGE2My0z MTViLWE0NmItYjFmMzUyMzRkNzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWE0MzE5MDItNWQ2MS00MjIwLWE5 MTMtYWY0ZjIxZjM0MTNkLzVhNDMxOTAyLTVkNjEtNDIyMC1hOTEzLWFmNGYyMWYz NDEzZC5jcmwwHwYDVR0jBBgwFoAUnD50weuXiUY37cmUREMyx2DqCBYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81YTQzMTkwMi01ZDYxLTQyMjAtYTkxMy1hZjRm MjFmMzQxM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6XIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHv26xPsK2N1X5jE9mf7lMxXFsP2BbMEgjvHivc/pC3PNpjLWY2nAsqS aVkSjRXAxD5LgjFuiPUpaIoy1M18kOAO1EFWM05Tdw+Uk7pX5/nOQHBPrQdNsrK4 GGGPOk/s3v+el3AfszDNpQL8EZFlSvMr7HqrsPK2VzuiZgkWkQuZ7KoP2Ek8QDsV 6CXcGNYPa7NnMlN1UTvo6dFZCDo6sJLSBCeirXR/8GEm90MWv9gktDg7aERMgl14 MQTwO4eAG2cWR8YSqru1E4T7qhhfzo3XQ4FMg59njyFMGRYpxxTstlrNssEz+OwY Y/rsKZv9aXcy1RAuI+DqsIN2OQ3nSq0= -----END CERTIFICATE-----Generated at Wed Nov 5 02:49:58 2025 by rpki-client